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AMENDMEP; ^ TO THE CLA IMg 

1 . (previously presented): An architecture for a network ^cess server, the architecture 
comprising: 

a first network interface device for communicating with a first network having a first 
protocol type, where the first network interface device has a first interface terminal for coupling 
to the first network and a second interface terminal, and where the first network device is 
configured to perform processing for the fu^st protocol type for data packets exchanged between 
the first and second interface terminals of the first network device; 

a second network interface device for communicating with a second network having a 
second protocol type, where the second network interface device has a first interface terminal for 
couphng to the second network and a second interface terminal coupled to the second interface 
terminal of the first network device, and where the second network device is configured to 
perform processing for the second protocol type for a first type of data packet exchanged between 
the first and second interface terminals of the second network device; 

a tliird network interface device for communicating with the second network, where the 
third network interface device has a firet interface terminal for coupling to the second network^ a 
second interface terminal coupled to the second interface terminal of the first network device, 
and a third interface terminal coupled to the first interface terminal of the second network device, 
and where the third network device is configured to perform processing for the second protocol 
type for a second type of data packet exchanged between the first and second interface terminals 
of the third network device, the third network interface device being further configured to detect 
reception of Ihe firs type of data packet at the first interface terminal of the third network 
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interface device and route tl>e first type of data packet to the third interface terminal of the third 
network interface device; and 

wherein the fust protocol type of the first network is a first real-time sensitive protocol 
and the second protocol type is a second real-time sensitive protocol configured to route each 
data packet to a destination address included in each data packet. 

2. (canceled). 

3. (currently amended): The architecture of claim 13, wherein the first protocol type is one 
of H,323 and H.324, and the second protocol type is IP/RTP. 

4. (original); The architecture of claim 3, wherein the first type of data packet is an unencrypted 
IP data packet and the second type of data packet is an encrypted data packet, 

5. (original): The architecture of claim 4, where the second type of data packet is an IPsec 
encrypted data packet. 

6. (original): The architecture of claim 5, where the third network interface device is configured 
to identify the second type of data packet by determining whether one of an AH field and an ESP 
field is present in a predetermined header of the second type of data packet, ax>d where the third 
network interface device is further configured to detect the first type of data packet by detecting 
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that the AH field and the ESP field are absent from the predetennined header of the first type of 
data packet 

7. (original): The architecture of claim 1 . wherein the second and third network interface 
devices share a predetermined network address on the second network. 

8. (original): The architecture of claim 1 , wherein the third network interface device further 
comprises: 

a switching device having a first terminal coupled to the first interface tenninal of the 
third network interface device, 4 second terminal^ and a third terminal coupled to the third 
interface temunal of the third network interface device, where the switching device is configured 
to identify the first type of data packet received at the first terminal and route it to the third 
terminal and identify the second type of data packet received at the first terminal and route it to 
the second tenninal; and 

a fourth network interface device for processing the second protocol type for the second 
type of data packet where the fourth network interface device has a first terminal coupled to the 
second terminal of the switching device and a second terminal coupled to the second interface 
terminal of the third network interface device. 

9. (original): The architecture of claim 8. where the switching device holds a predetermined 
network address on the second network that is shared by the second and fourth network interface 
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devices. 

10, (previously presented): A method for processing data packets in a network access device, 
the method comprising the steps of: 

receiving a data packet from a first network; 

determining whether the data packet has a first protocol type field in a header of the data 

packet; 

routing the data packet to a first gateway device for processing when the data packet has 
the first protocol type field; 




routing the data packet to a second gateway device for processing when the data packet 
does not have the first protocol type field; 



processing the data packet for a real-time sensitive protocol in the first gateway device; 

and 

processing the data packet for a security protocol and for the real-time sensitive protocol 
in the second gateway device, 

1 1 . (original): A computer readable medium having stored therein instructions for causing a 
central processing unit to execute the method of claim 10, 

12- (canceled). 
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13. (currently amended): The method of claim U^-^, where the real-time sensitive protocol 
is RTP and the security protocol is IPsec. 

1 4. (currently amended): The method of claim UVl^, further including the steps of: 

routing the data packet to a third gateway device after processing by the first gateway 
device, where the third gateway device ia coupled to a second network; and 

routing the data packet to the third gateway device after processing by the second gateway 

device. 

15. (original): The method of claim 14, where the real-time sensitive protocol is RTP and the 
security protocol is IPscc, and including the step of processing the data packet for one of an 

and an H.324 protocol in the third gateway device. 

16. (original): The method of claim 10, where the step of receiving a data packet from a first 
network includes using a single predetermined address for receiving the data packet from the first 
network when the data packet has the first protocol type field in the header of the data packet and 
when the data packet docs not have the first protocol type field in the header of the data packet, 

1 7. (previously presented): A network access server for conuniinicating between first and 
second networks, the server comprising: 
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a first gateway device for processing data flow between the first network and the network 
access server; 

a second gateway device for processing data flow between the first gateway device and 
the second network; 

a switching device interposed between the second gateway device and the second network 
for routing a first type of data packet fi:om the second network to the second gateway device and 
for processing a second type of data packet from the second network and routing the second type 
of data packet to the first gateway; and 

where the second type of data packet is an encrypted packet and where the switching 
device is configured to decrypt the second type of packet and route the second type of packet to 
the first gateway device based upon decrypted header information. 



18. (original): The network access server of claim 17, where the network access server has a 
single predetermined address on the second network. 

19. (canceled). 

20. (originsj): The network acQCss server of claim 17» where the second typo of data packet is an 
IPsec encrypted packet and where the switching device is configured to perform IPsec decryption 
of the second type of packet. 
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21. (original): The network access server of claim 20, where the switching device is configured 
to identify the second type of data packet by detecting whether one of an AH field and an ESP 
field is present in a predetermined header of the second type of packet. 

22. (original): The network access server of claim 20, where the switching device ie configured 
to route the second type of packet to the first gateway device based upon a decrypted UDP 
header in the second type of packet. 



23, (original): The network access server of claim 22, where the first network is a PSTN and the 
first gateway device is configured to process one of an H323 and an H.324 protocol. 

24. (original): The network access server of claim 23, where the second network is an internet 
protocol (IP) network, the second gateway device is configured to perform RTP protocol 
processing, and the switching device is configured to perform RTP protocol processing. 
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